CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5173 MEDIUM · 5.0 SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once… Sap
- CVE-2014-5172 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de XS Administration Tools in SAP HANA stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Sap
- CVE-2014-5171 LOW · 2.9 SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain… Sap
- CVE-2014-3554 MEDIUM · 6.8 Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a… Libndp
- CVE-2014-3488 MEDIUM · 5.0 The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message. Netty
- CVE-2012-6651 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary files via a .. (dot dot) in… Vitamin Plugin Project
- CVE-2014-5117 MEDIUM · 5.8 Tor vóór 0.2.4.23 en 0.2.5 vóór 0.2.5.6-alpha onderhoudt een circuit nadat een inkomende RELAY_early-cel door een client is ontvangen, wat het voor aanvallers op afstand… Torproject
- CVE-2014-2356 MEDIUM · 4.3 Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a… Innominate
- CVE-2014-3025 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management… Ibm
- CVE-2014-0948 MEDIUM · 6.0 Unspecified vulnerability in IBM Rational Software Architect Design Manager and Rational Rhapsody Design Manager 3.x and 4.x before 4.0.7 allows remote authenticated users to execute… Ibm
- CVE-2014-0947 MEDIUM · 6.0 Unspecified vulnerability in the server in IBM Rational Software Architect Design Manager 4.0.6 allows remote authenticated users to execute arbitrary code via a crafted update… Ibm
- CVE-2014-0915 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management… Ibm
- CVE-2014-0914 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and… Ibm
- CVE-2014-3897 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Homepage Decorator PerlMailer 3.10 en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Homepage Decorator Perlmailer Project
- CVE-2014-3896 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in CGI programs in Seeds acmailer before 3.8.17 and 3.9.x before 3.9.10 Beta allow remote attackers to hijack the… Seeds
- CVE-2014-3895 MEDIUM · 6.4 De I-O DATA TS-WLCAM-camera met firmware 1.06 en eerder, TS-WLCAM/V-camera met firmware 1.06 en eerder, TS-WPTCAM-camera met firmware 1.08 en eerder, TS-PTCAM-camera met firmware 1.08… Iodata
- CVE-2014-3329 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de webservercomponent in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) en eerder stelt externe aanvallers in staat om willekeurig… Cisco
- CVE-2014-3057 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to… Ibm
- CVE-2014-3056 MEDIUM · 5.0 The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about… Ibm
- CVE-2014-3055 HIGH · 7.5 SQL-injectiekwetsbaarheid in de Unified Task List (UTL) Portlet voor IBM WebSphere Portal 7.x en 8.x tot en met 8.0.0.1 cf12 stelt EXTERNE aanvallers in staat… Ibm
- CVE-2014-3054 MEDIUM · 5.8 Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to… Ibm
- CVE-2014-3050 LOW · 3.5 IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users… Ibm
- CVE-2014-3026 LOW · 3.5 CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, allows remote… Ibm
- CVE-2014-3020 MEDIUM · 6.9 install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the… Ibm
- CVE-2014-0889 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in IBM Atlas Suite (ook bekend als Atlas Policy Suite), zoals gebruikt in Atlas eDiscovery Process Management via 6.0.3, Disposal… Ibm
- CVE-2014-5116 MEDIUM · 5.0 The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via… Cairographics
- CVE-2014-5115 MEDIUM · 5.0 Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname in the phpfile parameter to index.php. Dirphp Project
- CVE-2014-5114 HIGH · 7.5 WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the (1) js or (2) cat parameter. Webidsupport
- CVE-2014-5031 MEDIUM · 5.0 The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified… Apple Canonical
- CVE-2014-5030 LOW · 1.9 CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html, (2) index.class, (3) index.pl, (4) index.php, (5) index.pyc,… Canonical Apple
- CVE-2014-5029 LOW · 1.5 Met de webinterface in CUPS 1.7.4 kunnen lokale gebruikers in de lp-groep willekeurige bestanden lezen via een symlink-aanval op een bestand in /var/cache/cups/rss/ en taal[0]… Apple Canonical
- CVE-2014-4909 MEDIUM · 6.8 Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary… Canonical Fedoraproject Gentoo Transmissionbt
- CVE-2014-4710 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field. Aas9
- CVE-2014-2226 LOW · 2.6 Ubiquiti UniFi Controller vóór 3.2.1 registreert de administratieve wachtwoordhash in syslog-berichten, waarmee man-in-the-middle-aanvallers gevoelige informatie kunnen verkrijgen via niet-gespecificeerde vectoren. Ui
- CVE-2014-0475 MEDIUM · 6.8 Door meerdere kwetsbaarheden in de GNU C-bibliotheek (ook bekend als glibc of libc6) vóór 2.20 kunnen contextafhankelijke aanvallers ForceCommand-beperkingen omzeilen en mogelijk andere niet-gespecificeerde impact… Gnu
- CVE-2014-0103 LOW · 2.1 WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the… Zarafa Fedoraproject
- CVE-2014-3553 MEDIUM · 4.9 mod/forum/classes/post_form.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the moodle/site:accessallgroups capability requirement… Moodle
- CVE-2014-3552 MEDIUM · 6.0 De Shibboleth-authenticatieplugin in auth/shibboleth/index.php in Moodle tot en met versie 2.3.11, 2.4.x vóór 2.4.11 en 2.5.x vóór 2.5.7 controleert niet of een sessie-ID leeg is.… Moodle
- CVE-2014-3551 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before… Moodle
- CVE-2014-3550 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that… Moodle
- CVE-2014-3549 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de get_description-functie in lib/classes/event/user_login_failed.php in Moodle 2.7.x vóór 2.7.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te… Moodle
- CVE-2014-3548 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers… Moodle
- CVE-2014-3547 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary… Moodle
- CVE-2014-3546 MEDIUM · 5.0 Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php… Moodle
- CVE-2014-3545 MEDIUM · 6.0 Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via… Moodle
- CVE-2014-3544 LOW · 3.5 Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote… Moodle
- CVE-2014-3543 MEDIUM · 4.3 mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files… Moodle
- CVE-2014-3542 MEDIUM · 4.3 mod/lti/service.php in Moodle via 2.3.11, 2.4.x vóór 2.4.11, 2.5.x vóór 2.5.7, 2.6.x vóór 2.6.4 en 2.7.x vóór 2.7.1 stelt aanvallers op afstand in staat om… Moodle
- CVE-2014-3541 HIGH · 7.5 The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct… Moodle
- CVE-2013-7393 LOW · 2.4 The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1)… Apache